CB Response: Sensors show "invalid date" for Activity on sensors page in console
search cancel

CB Response: Sensors show "invalid date" for Activity on sensors page in console

book

Article ID: 291782

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

  • Sensors show "Invalid Date" for Activity status on Sensors page in WebUI console
  • Sensors in this state never seem to checkin and submit data before the next round of registration happens to create duplicates

Environment

  • Cb Response Server: All Versions

Cause

The "invalid date" entries in the WebUI is due to the last_update time being `NULL` in PSQL(postgres) sensor_registrations table.

Resolution

Run this query to mark all of those affected sensors as "uninstalled"
#psql -d cb -p 5002 -c "update sensor_registrations set uninstalled='t' where last_update is NULL and registration_time <= current_timestamp -(10 * interval '1 day');"